Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/UljD7GmXs_MVysPo0cwAE4s5QGE.roa
File: UljD7GmXs_MVysPo0cwAE4s5QGE.roa (raw, json)
Hash identifier: PeEB764A567eR/425zQxu80NKslqyzi+IoxFRTbLdLk=
Subject key identifier: 52:58:C3:EC:69:97:B3:F3:15:CA:C3:E8:D1:CC:00:13:8B:39:40:61
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 018CC64A018DA3DFD64C476800D6C045C794
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/UljD7GmXs_MVysPo0cwAE4s5QGE.roa
Signing time: Mon 01 Jan 2024 18:29:47 +0000
ROA not before: Mon 01 Jan 2024 18:29:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199423
IP address blocks: 2a12:bec0:1b0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 00:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:01:8d:a3:df:d6:4c:47:68:00:d6:c0:45:c7:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 18:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5258c3ec6997b3f315cac3e8d1cc00138b394061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b0:0e:ec:24:36:01:8a:1e:f6:4d:22:6f:4f:
f0:da:7a:e7:03:73:5e:98:78:72:74:ae:5d:c1:82:
6f:1d:d9:dc:6e:c7:85:45:90:0c:a1:2e:b2:ec:56:
b5:36:5f:b8:d2:ad:1c:b4:0c:71:70:4d:dc:1f:6d:
93:f1:85:f4:ab:b8:64:86:7c:be:6b:7a:0b:3c:4e:
3e:90:5d:68:46:0c:60:18:10:f3:bc:c6:74:7d:17:
15:47:47:90:25:18:aa:cb:d3:0e:75:f7:e2:85:0c:
59:ea:b2:da:e4:d5:ea:7f:4f:6d:6a:35:13:72:83:
17:d3:62:ea:9e:e6:fc:7c:61:0b:99:97:71:d3:1f:
cc:0c:57:50:ef:62:11:39:fb:f4:4d:b5:50:7f:2e:
a1:93:a1:be:40:ac:b1:cc:df:2e:52:82:cc:84:da:
91:7b:a0:4c:44:d6:ab:20:a6:06:44:de:25:be:5f:
e2:b1:81:8f:c7:9d:db:b8:c8:40:ea:67:be:c8:e9:
c0:48:0f:05:3d:71:07:1e:fe:96:6b:0c:c8:f6:f2:
d0:19:65:71:cf:e8:48:a9:6f:34:ec:0c:0d:b0:ad:
96:16:1e:f0:e2:7f:6b:6d:87:47:ee:2a:0b:a6:6c:
c2:b6:55:bd:4e:5b:24:22:99:01:e0:ce:85:20:70:
3d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:58:C3:EC:69:97:B3:F3:15:CA:C3:E8:D1:CC:00:13:8B:39:40:61
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/UljD7GmXs_MVysPo0cwAE4s5QGE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:1b0::/44
Signature Algorithm: sha256WithRSAEncryption
2a:90:89:18:d6:cc:52:6c:99:7c:77:52:d8:99:f0:06:cf:8f:
82:e8:61:3f:ea:a8:ee:f8:a0:b0:e8:77:70:cc:4b:a4:88:be:
66:4e:f7:14:01:bc:a4:9a:6e:29:ed:a1:ed:0a:0c:8e:da:9b:
fe:8e:1c:a4:f3:59:58:9c:e2:48:e5:31:a0:21:01:89:79:84:
4a:85:33:17:68:27:11:a3:fa:7c:f9:ae:b4:0f:7f:57:58:f8:
5a:e8:2c:40:d6:75:f3:f8:d0:a1:b0:e0:ba:04:95:ec:9f:a1:
28:d6:8f:5f:45:67:31:30:ea:a3:95:06:a0:b6:f1:52:10:1a:
3c:42:ae:cf:14:62:90:17:3d:30:21:de:7b:02:00:4d:13:bc:
9f:b1:d4:85:1d:95:bc:32:89:e3:7c:df:d6:11:7f:35:44:93:
5e:04:26:1b:df:1e:f1:30:34:1b:6d:2b:7e:f2:16:43:bd:a2:
85:10:96:87:e1:c0:cd:14:73:c5:ad:e6:4b:1a:04:1b:06:6f:
01:7a:13:0e:db:91:22:f5:3b:fa:dc:e1:c4:ea:6c:e9:bf:55:
29:d7:2a:ae:9f:77:f6:9e:94:f7:ff:be:a2:f5:0a:11:30:3d:
6c:9e:c8:95:a2:de:20:53:63:72:28:39:6b:b2:9c:e8:c7:d9:
c7:9c:85:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 09:01:16 2024 by rpki-client on console-ams.rpki-client.org